New Malware Steals Passwords Saved in Your Web Browser

Microsoft has noticed a sharp increase in attacks using malware called ACR Stealer. This malicious software specifically targets information stored in web browsers, including saved passwords, login credentials, and sensitive documents. When it infects a computer, it can steal all the passwords you have saved in browsers like Chrome, Edge, Firefox, or Safari.

This threat primarily affects businesses and organizations that use Microsoft services, but families should pay attention too. If you save passwords in your web browser for sites like email, banking, shopping, or social media, this type of malware could steal all of them at once.

The malware also grabs authentication tokens, which are digital keys that keep you logged into websites, and looks for important documents on your computer.

1. Stop saving passwords directly in your web browser.
2. Download a dedicated password manager like Bitwarden, 1Password, or Dashlane instead.
3. Go through your browser settings and delete any saved passwords, then re-save them in your new password manager.
4. Enable two-factor authentication on all important accounts, especially email and banking.
5. Make sure your antivirus software is up to date and running.
6. Be extremely careful about what you download and what links you click in emails. For long-term protection, never save passwords in your browser again. Password managers are much more secure and harder for malware to access. They also help you create stronger, unique passwords for every site. Teach everyone in your family to recognize phishing emails and suspicious downloads, since that is usually how this malware gets installed in the first place. Regular computer updates and good antivirus software provide essential protection against threats like this.